This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa
File:                     323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa (raw, json)
Hash identifier:          Rv+2kouePE7c2tZHefKQmS6QEtJSLDoyuvVkiB7H60M=
Subject key identifier:   46:23:A4:8A:BD:F5:D6:CB:2C:F8:B0:E7:51:79:22:31:60:6C:A4:CF
Certificate issuer:       /CN=2AAD0546D869051DF88F8860A3540C3582BA1456
Certificate serial:       640AFCBF8C8745E3ADF5AD384764505D2D2E474A
Authority key identifier: 2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa
Signing time:             Wed 03 Dec 2025 15:17:25 +0000
ROA not before:           Wed 03 Dec 2025 15:12:25 +0000
ROA not after:            Wed 02 Dec 2026 15:17:25 +0000
asID:                     265384
IP address blocks:        2804:3340:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl
                          rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 07 Dec 2025 04:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0a:fc:bf:8c:87:45:e3:ad:f5:ad:38:47:64:50:5d:2d:2e:47:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AAD0546D869051DF88F8860A3540C3582BA1456
        Validity
            Not Before: Dec  3 15:12:25 2025 GMT
            Not After : Dec  2 15:17:25 2026 GMT
        Subject: CN=4623A48ABDF5D6CB2CF8B0E751792231606CA4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:3e:24:a0:19:ff:f8:d0:53:66:0f:a0:7e:1a:
                    a1:4a:de:01:69:13:22:e8:35:39:02:18:93:de:8d:
                    6b:2b:48:62:29:63:1e:34:76:08:ed:28:89:d1:e9:
                    61:a3:3f:7e:f4:b5:00:7e:87:22:17:72:31:76:20:
                    9d:78:36:44:07:a3:12:4f:41:bf:09:c5:b9:04:a2:
                    7d:d2:01:18:d9:c1:02:e8:25:66:bb:06:7c:0f:e8:
                    d6:f0:b1:22:f7:bb:6a:60:d4:ba:67:f7:7a:06:7f:
                    bb:06:4a:16:9c:0d:68:17:b5:17:8d:35:ba:5b:bc:
                    10:77:4a:b9:d1:f1:d5:22:ba:63:38:02:48:58:d3:
                    ce:40:38:05:52:5f:95:0b:06:a3:3c:72:de:7d:64:
                    e0:38:8b:dd:70:e7:50:25:dc:53:be:40:74:e2:ae:
                    a6:43:84:8e:26:5f:ba:cc:f2:b6:68:bf:a7:e3:12:
                    00:9f:c7:b8:88:ec:87:6d:49:ea:a0:eb:7b:26:86:
                    31:84:94:d1:ea:21:cb:8a:d4:7d:ef:9f:f9:19:b3:
                    11:cb:82:28:8a:fb:37:42:e9:f4:4f:5e:60:af:85:
                    fa:d2:3b:41:fa:99:2f:18:24:34:cd:e4:40:9f:32:
                    1f:bf:31:7d:75:ee:cc:67:9d:87:7d:bc:82:8c:c7:
                    31:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:23:A4:8A:BD:F5:D6:CB:2C:F8:B0:E7:51:79:22:31:60:6C:A4:CF
            X509v3 Authority Key Identifier:
                keyid:2A:AD:05:46:D8:69:05:1D:F8:8F:88:60:A3:54:0C:35:82:BA:14:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/2AAD0546D869051DF88F8860A3540C3582BA1456.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AAD0546D869051DF88F8860A3540C3582BA1456.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NP8cPD44TjwfPWPDvpRU3zSxgYJ9YVEWCjaigfceQpt/0/323830343a333334303a333030303a3a2f34382d3438203d3e20323635333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3340:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:91:03:1e:b9:db:8d:d2:83:9d:b5:79:e7:cd:3b:4c:17:61:
         36:5b:fb:bd:72:6e:8d:80:4f:05:7c:0b:26:1d:f1:05:de:17:
         e4:39:06:00:b6:a6:7a:07:6a:a4:68:04:26:dd:d7:16:f9:38:
         43:47:7e:15:20:2c:e0:b2:92:2d:c0:19:28:43:f3:98:0e:8a:
         7d:f7:1e:3b:d1:85:33:c1:4e:32:7f:00:07:47:98:33:a1:a1:
         ba:56:ca:c0:9a:c8:38:f4:85:06:5c:8b:52:b6:e5:c2:cc:4c:
         7d:24:5f:a5:cd:c1:bd:86:73:34:dc:ff:ee:bf:cf:47:c4:55:
         01:2d:37:2d:32:12:93:43:dc:c9:6c:b0:a8:c0:24:75:d5:1f:
         32:a9:93:35:35:78:47:5b:55:2b:1e:88:23:ed:3f:6c:62:70:
         45:c4:f4:65:c6:c6:b5:90:dc:fb:6b:29:bc:e2:7c:79:e9:4d:
         5b:d1:bd:a2:fe:8e:97:c7:a8:f2:08:0e:2a:55:99:dc:28:7a:
         57:22:bf:13:f8:0f:50:bf:b8:99:0f:a7:23:8b:69:8f:30:3f:
         51:18:77:ea:5e:f8:b6:3c:75:51:47:30:3a:a6:bf:31:63:ce:
         4a:a2:3b:cc:36:00:e3:73:0d:35:51:f6:d8:04:1e:fa:c0:a7:
         e0:36:c3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:45:45 2025 by rpki-client